1 day ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Stand up and run a Product Security Incident Response Team (PSIRT) and serve as the technical owner of the Coordinated Vulnerability Disclosure (CVD) program. Lead CVE Numbering Authority (CNA) operations, triage SLAs, severity rubrics, and public CVE publishing. Drive cross-functional remediation across hardware, firmware, SRE, mobile, legal, communications, and support, while authoring advisories, postmortems, and operational metrics.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Own the operational model and execution of the Product Security Incident Response Team (PSIRT) for externally reported and internally discovered product vulnerabilities.
•Lead CVE Numbering Authority (CNA) operations including vulnerability intake, triage SLAs, severity rubrics, and public CVE record publishing.
•Coordinate cross-functional remediation across Hardware, Firmware, Device SRE, Cloud SRE, Mobile, Legal, Communications, and Support to deliver timely patches.
•Author public security advisories, internal postmortems, and executive summaries for technical, legal, and leadership audiences.
•Establish PSIRT performance metrics and operational reporting such as time-to-triage, time-to-fix, and time-to-disclose.

Pay and Benefits

Salary: USD 185,000 - 230,000 annually

Key Requirements

•Demonstrated experience leading or running a PSIRT, product security, or coordinated vulnerability disclosure function in connected hardware or IoT environments.
•Experience acting as a CVE Numbering Authority (CNA) or implementing the FIRST PSIRT Services Framework across discovery, triage, remediation, and disclosure.
•Hands-on product security background across embedded or firmware security, Linux or Android device security, AWS cloud security, or mobile application security.
•Expertise applying CVSS, CWE, EPSS, and SSVC frameworks to evaluate risk and assign vulnerability severities.
•Strong written communication skills to translate complex vulnerabilities into clear customer, engineer, and executive advisories.

Experience:IoTConnected hardware

Skills:Cross-functional influenceWritten communicationRisk evaluationPolicy adherence

Tech Stack:CVECNAPSIRTCVDCVSSCWEEPSSSSVCLinuxAndroidAWSMobile application security

Company Brief

Flock Safety

Builds automated license-plate recognition cameras, AI video, gunshot-detection and drone systems plus investigative software to help law enforcement, cities, businesses and neighborhoods prevent and solve crime.

Industry: Surveillance & Security Hardware

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Atlanta, United States

Founded: 2017

Glassdoor: 3.5

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Flock Safety

1 day ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Sr. Manager level

Key Responsibilities

•Own the operational model and execution of the Product Security Incident Response Team (PSIRT) for externally reported and internally discovered product vulnerabilities.
•Lead CVE Numbering Authority (CNA) operations including vulnerability intake, triage SLAs, severity rubrics, and public CVE record publishing.
•Coordinate cross-functional remediation across Hardware, Firmware, Device SRE, Cloud SRE, Mobile, Legal, Communications, and Support to deliver timely patches.
•Author public security advisories, internal postmortems, and executive summaries for technical, legal, and leadership audiences.
•Establish PSIRT performance metrics and operational reporting such as time-to-triage, time-to-fix, and time-to-disclose.

Pay and Benefits

Salary: USD 185,000 - 230,000 annually

Key Requirements

•Demonstrated experience leading or running a PSIRT, product security, or coordinated vulnerability disclosure function in connected hardware or IoT environments.
•Experience acting as a CVE Numbering Authority (CNA) or implementing the FIRST PSIRT Services Framework across discovery, triage, remediation, and disclosure.
•Hands-on product security background across embedded or firmware security, Linux or Android device security, AWS cloud security, or mobile application security.
•Expertise applying CVSS, CWE, EPSS, and SSVC frameworks to evaluate risk and assign vulnerability severities.
•Strong written communication skills to translate complex vulnerabilities into clear customer, engineer, and executive advisories.

Experience:IoTConnected hardware

Skills:Cross-functional influenceWritten communicationRisk evaluationPolicy adherence

Tech Stack:CVECNAPSIRTCVDCVSSCWEEPSSSSVCLinuxAndroidAWSMobile application security

Company Brief

Flock Safety

Industry: Surveillance & Security Hardware

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Atlanta, United States

Founded: 2017

Glassdoor: 3.5

Website LinkedIn Glassdoor